Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/nOib3p_ywlvSanuW_lIkb6PlqRk.roa
File: nOib3p_ywlvSanuW_lIkb6PlqRk.roa (raw, json)
Hash identifier: hVB1lVMS7awQvaNbSX2KPA/8tStI4n+WsKXIBJZxFiU=
Subject key identifier: 9C:E8:9B:DE:9F:F2:C2:5B:D2:6A:7B:96:FE:52:24:6F:A3:E5:A9:19
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018570E7CF6987914ED6B7B15150D5A2D29B
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/nOib3p_ywlvSanuW_lIkb6PlqRk.roa
Signing time: Mon 02 Jan 2023 05:15:18 +0000
ROA not before: Mon 02 Jan 2023 05:15:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207662
IP address blocks: 2a0e:97c0:760::/44 maxlen: 48
2a0e:97c0:76f::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:cf:69:87:91:4e:d6:b7:b1:51:50:d5:a2:d2:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 05:15:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ce89bde9ff2c25bd26a7b96fe52246fa3e5a919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ac:a8:44:49:9b:ea:bb:e9:35:50:61:f4:f1:
c3:09:d8:aa:ba:0e:19:df:94:56:18:6e:62:61:8d:
c8:49:05:12:74:27:95:27:c7:c6:12:dc:3f:14:fd:
e4:fb:1b:a0:6f:ea:24:39:e4:6a:b6:2d:1c:15:29:
d5:27:38:c7:a2:e7:02:ae:d1:4c:88:5b:cd:a2:2c:
00:37:5b:da:bd:a8:a6:5f:00:fb:75:cf:7b:30:68:
31:15:43:3f:11:32:b3:46:0a:f9:52:1c:5c:93:07:
d5:6e:23:4b:4d:ff:c8:46:8a:51:a9:3f:2c:92:f5:
ae:9d:29:4d:67:e5:bf:90:57:f5:b5:25:d9:3e:87:
24:32:0d:75:ac:8c:9f:b5:d1:9c:7e:a5:c2:8b:0c:
6b:1d:a8:86:cf:e1:61:17:09:4f:e4:58:11:00:0c:
bb:69:22:1d:f3:9d:23:94:ae:03:c2:b3:d6:75:b5:
df:9b:5e:ae:15:75:15:75:c1:5e:7c:e4:3d:ab:aa:
4c:a6:7a:83:af:00:1a:23:67:c9:04:f7:31:06:a1:
42:f6:02:e9:f7:ab:b8:2d:83:82:00:77:9b:b6:da:
5d:8d:ba:ee:2a:9d:e8:1b:2b:07:5f:5d:a6:af:c2:
c8:7a:49:ff:bb:03:4d:de:a4:47:d4:09:ed:d8:dc:
a7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E8:9B:DE:9F:F2:C2:5B:D2:6A:7B:96:FE:52:24:6F:A3:E5:A9:19
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/nOib3p_ywlvSanuW_lIkb6PlqRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:760::/44
Signature Algorithm: sha256WithRSAEncryption
17:23:79:2d:bb:13:1a:13:41:73:78:d5:b0:04:87:b8:69:9f:
e7:ad:bb:30:e1:54:15:4d:9e:79:a9:bf:c8:91:72:29:99:ba:
e4:a4:bb:d5:ed:f9:9a:a3:54:0e:05:6d:13:24:74:c3:3f:86:
bb:c4:f1:d2:0f:f5:55:f1:f0:54:5a:13:94:dd:c9:e8:55:05:
34:8b:e9:c0:76:8d:c5:cd:fb:3c:09:fa:e7:d0:b5:ae:51:d9:
e7:f8:08:dd:f5:88:f3:06:ce:83:d0:6b:68:9e:bf:55:2d:a6:
9b:e4:88:be:67:5e:02:62:67:4c:75:81:58:02:30:a2:93:77:
f9:7a:b1:9f:55:75:31:e0:c3:12:8a:d1:ea:0f:06:86:83:e3:
95:35:e7:11:81:2d:0c:e4:50:c0:02:d1:e8:ff:66:a3:a1:ba:
ec:dc:bc:69:69:c6:6f:6c:d0:aa:38:89:48:bf:b0:df:47:fc:
ae:65:c2:1d:fe:3b:b1:db:31:69:d9:bd:cd:0e:da:39:1a:b2:
61:f0:88:58:52:69:55:5d:0e:23:19:55:9e:68:17:90:21:c3:
f1:4c:18:b7:d8:5e:64:1c:03:b8:06:94:79:af:4b:d8:a9:70:
9a:3c:c5:28:4e:67:73:3e:d4:fe:03:36:c0:26:5b:cb:80:5e:
60:bb:15:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:33 2024 by rpki-client on console-fra.rpki-client.org